This guide applies to all device platforms
About Device Record Deletion
Deleting a device record from Iru Endpoint lets admins remove unwanted or unused devices from the Iru Endpoint Web App. If the device is online, the Kandji Agent and MDM Profile will be removed as applicable.The device must be powered on and have internet access for the uninstall to complete. Deleting the device record will remove all history of that device stored in Iru Endpoint and can’t be recovered. This will not erase the device.
How It Works
When you delete a device record, Iru Endpoint removes all management components from the device and permanently deletes all associated data from the platform. This process is irreversible and requires re-enrollment to restore management. For Android devices, deleting the device record causes complete device unenrollment. The work profile is removed along with any corporate resources provisioned by Iru Endpoint. At that point, the device is considered completely unmanaged and “personally owned.”Device Record Removal Considerations
- All related device record information is destroyed when a device record is deleted.
-
The following device secrets will be permanently removed from Iru Endpoint:
- Device lock PIN code
- Recovery password
- FileVault Recovery Key
- Activation Lock Bypass Code
- All Parameter history will be lost.
-
The device will need to be re-enrolled into Iru Endpoint to regain management.
- If the device is Automated Device Enrollment-eligible, it will automatically re-enroll with Iru Endpoint during Setup Assistant.
- If the device is not Automated Device Enrollment-eligible, it must be manually re-enrolled using your Add Devices link.
Removing a Device from Your Iru Endpoint Tenant
If you no longer wish to manage a device, you can uninstall Iru Endpoint from the device and remove its record from your Iru Endpoint account with one step. Here’s how:
When the device record is deleted, the device will be notified during its next check-in that it’s no longer enrolled and will automatically remove management components. The specific timing and process varies by platform:
- macOS
- Windows
- iOS/iPadOS/tvOS/visionOS
- Android
The Kandji Agent will be notified on the next check-in (every 15 minutes) that the computer is no longer enrolled and uninstall itself automatically after removing installed profiles.Items removed:
- Kandji Agent
- Profiles installed via MDM
- Apps deployed using Apps and Books
Removing Multiple Devices from Your Iru Endpoint Tenant
Platform-Specific Considerations
- macOS
- Windows
- iOS/iPadOS/tvOS/visionOS
- Android
Best Practices for Reassigning Mac ComputersIn many organizations, there are instances where a computer is returned by one user and needs to be prepared for a new user. In such cases, it’s recommended to erase the computer and reinstall macOS completely. This process guarantees a fresh and clean setup for the new user, eliminating any concerns about residual data on the computer. If the computer is enrolled in Iru Endpoint, you can follow these steps to erase the device.What Happens When I Erase a Mac Remotely?macOS’s behavior varies based on the version and hardware support. Specifically, one of two actions will be triggered: Erase All Content and Settings or Obliteration. The remote wipe behavior experienced is unique to each combination of hardware and macOS version, is subject to multiple conditions. These conditions are detailed in our Lock Device and Erase Device support article.Can I Erase a Mac Locally?There are a few options if you need to erase the computer locally. Apple has a support article on how to Erase your Mac and reset it to factory settings. That article shows how to Erase all Content and Settings on Apple Silicon computers and Intel devices with the Apple T2 Security Chip so that macOS doesn’t have to be reinstalled once the device is erased. It also has additional article links that cover how to erase the device when that option isn’t available. If macOS needs to be reinstalled, you can use Apple’s support article on How to reinstall macOS from macOS Recovery.